
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@roadiehq/backstage-plugin-bulk-catalog-import
Advanced tools

https://roadie.io/backstage/plugins/bulk-catalog-import
If you have your own backstage application without this plugin, here it's how to add it:
backstage/packages/app
project add the plugin as a package.json
dependency:yarn add @roadiehq/backstage-plugin-bulk-catalog-import
// packages/app/src/plugins.ts
export { plugin as BulkCatalogImportPlugin } from '@roadiehq/backstage-plugin-bulk-catalog-import';
App.tsx
source file:// packages/app/src/App.tsx
import { Router as BulkCatalogImportRouter } from '@roadiehq/backstage-plugin-bulk-catalog-import';
...
<Route
path="/bulk-catalog-import/*"
element={<BulkCatalogImportRouter />}
/>
// packages/app/src/components/Root/Root.tsx
<SidebarItem
icon={AddIcon}
to="bulk-catalog-import"
text="Bulk catalog import"
/>
If you are not yet authenticated via GitHub OAuth, on the first visit plugin will prompt you to login via GitHub.
Your organization may have Third-party application access restriction, which means that upon authenticating with Github you will be able to request organization owner to grant backstage app access to organization private data via GitHub API. Until the access is granted, you won't be able to access organization's data via this plugin. Note that you have to be an organization's member, not an outside collaborator to be able to fetch organization's data via GitHub API.
You can clone the plugin repo into the packages/
directory:
git clone https://github.com/RoadieHQ/backstage-plugin-bulk-catalog-import.git bulk-catalog-import
and run yarn
in the root backstage directory - it will create a symbolic link so the dependency will be provided from the source code instead of node_modules package.
FAQs

The npm package @roadiehq/backstage-plugin-bulk-catalog-import receives a total of 0 weekly downloads. As such, @roadiehq/backstage-plugin-bulk-catalog-import popularity was classified as not popular.
We found that @roadiehq/backstage-plugin-bulk-catalog-import demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.